Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/583618b8-f00f-300a-b422-674440b22d02.roa
File:                     583618b8-f00f-300a-b422-674440b22d02.roa (raw, json)
Hash identifier:          c2iRAvcdCDxI8kuSZ+cLEvJ3sBXcU1ZXKy38HLhdzkY=
Subject key identifier:   5E:33:F0:7F:78:8B:B2:56:5F:04:41:9E:E6:06:33:DF:88:12:96:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858498339E7D7AE4F5DDFF86BE720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/583618b8-f00f-300a-b422-674440b22d02.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     396577
IP address blocks:        192.12.94.30/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:e7:d7:ae:4f:5d:df:f8:6b:e7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=cd5142c8-c15c-4ffb-b52f-5cdc43b7c17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:7a:ba:bc:40:83:fd:3d:0b:17:ec:32:44:
                    30:07:b9:e6:ba:9b:61:7d:3d:5b:ae:56:c0:09:08:
                    fc:8b:15:25:63:56:45:3d:60:42:c6:fa:84:a1:bb:
                    10:0d:56:89:6a:ea:c0:7a:a6:72:23:0e:bf:2c:6b:
                    4a:e3:b6:ae:3c:27:d2:28:d1:a2:1d:91:e0:0e:2f:
                    87:4f:49:16:a0:71:52:ec:d3:35:4c:83:af:a6:43:
                    55:32:ab:4f:ae:6c:ab:85:50:1c:86:7e:93:61:c3:
                    64:5c:20:38:79:a1:5a:34:db:87:2b:18:ea:fb:99:
                    c7:d4:16:ae:42:36:98:42:74:d3:d9:03:e4:b2:8c:
                    88:05:fe:da:94:03:80:4b:08:87:15:35:67:bd:75:
                    f1:ae:22:61:36:34:61:fd:b6:d4:b6:42:5f:31:40:
                    fe:08:e9:27:7a:2e:3a:0c:10:6b:3b:68:b7:55:6f:
                    1e:14:ee:50:9a:20:dc:53:7d:78:43:90:fd:ec:b9:
                    d4:d4:a2:6b:a8:f2:58:58:70:27:8e:a0:38:63:55:
                    08:3c:1e:b7:53:b1:46:56:71:6d:b4:3f:d4:44:8c:
                    c0:de:b7:82:76:4e:71:49:96:1c:ba:93:be:04:25:
                    89:1a:68:25:2e:b9:62:a8:97:8b:38:17:4e:fc:83:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:33:F0:7F:78:8B:B2:56:5F:04:41:9E:E6:06:33:DF:88:12:96:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/583618b8-f00f-300a-b422-674440b22d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:d5:eb:2f:fa:40:a7:ef:2b:f4:e4:55:24:b4:b1:2b:d0:
         d4:09:ec:56:58:ce:1a:e7:38:18:ff:82:af:0b:ab:10:a1:ea:
         46:05:19:88:2c:da:6f:54:6c:a8:1a:4f:b2:9a:5a:e6:18:48:
         58:b6:44:e9:de:f5:d7:86:a7:4c:31:2c:75:ea:a1:4a:24:72:
         88:e3:0d:bc:63:70:d9:9f:a7:91:cb:02:d9:eb:4d:d1:12:4c:
         a7:16:0c:d3:f0:2d:ff:b8:a9:97:b1:a8:49:68:95:08:a0:7a:
         8c:cf:1d:9e:fe:41:da:59:7e:5c:d3:57:f9:19:ff:10:1e:f7:
         0e:72:a5:49:42:31:01:5c:53:e3:a5:23:0b:86:9e:0e:e4:7f:
         c7:71:97:03:0e:66:20:ed:dc:93:ca:0b:69:84:08:92:fe:e0:
         1a:13:66:cd:45:13:94:6b:18:a4:7d:c8:68:cf:51:1b:03:90:
         00:d0:6c:cd:29:6f:3a:f8:ed:83:1d:bc:f0:00:66:c4:34:5f:
         a1:16:94:f4:9e:44:ef:32:0e:c0:e2:f4:4c:b7:d0:ee:68:c1:
         3b:16:a9:db:53:7e:a5:57:35:b2:0a:c7:ba:85:df:3b:14:2e:
         08:6b:c7:96:3b:90:bf:70:5c:29:ce:a9:22:b5:eb:01:92:4d:
         6a:7b:07:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----